Synced 08 Oct 2026 20:56 UTC Account

Is Elasticsearch 8.18.8 patched?

Elastic · cycle 8.18 · end of life · Official site ↗
8.18.840/100End of life

Current stable (9.5.5): 100/100

Minimum safe version8.19.20

8.18.8 has 1 open critical-or-high vulnerability. Run 8.19.20 or later to clear it. See what 8.19.20 fixes →

Health score40/100
Open issues28
Exploited now0
Cycle 8.18 EOL2025-10-21
Latest release9.5.5

Summary iPlain-English security status for Elasticsearch 8.18.8, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Elasticsearch 8.18.8 is part of the 8.18 release line. 28 known vulnerabilities affect it. The minimum safe version is 8.19.20 — upgrade to it or later to clear the open critical/high issues. The 8.18 line reached end-of-life on 2025-10-21, so it no longer receives security patches. The latest supported Elasticsearch release is 9.5.5.

Known issues affecting 8.18.8

Exploited first, then by exploitation probability.

CVE-2026-72649 HIGH EPSS 1% → fixed in 9.4.5 CVE-2026-94408 MEDIUM EPSS 0% → fixed in 9.5.3 CVE-2026-82294 MEDIUM EPSS 0% → fixed in 9.5.3 CVE-2026-82300 MEDIUM EPSS 0% → fixed in 9.5.4 CVE-2026-94397 MEDIUM EPSS 0% → fixed in 9.5.4 CVE-2026-94398 MEDIUM EPSS 0% → fixed in 9.5.4 CVE-2026-94399 MEDIUM EPSS 0% → fixed in 9.5.4 CVE-2026-72683 MEDIUM EPSS 0% → fixed in 9.4.4 CVE-2026-72686 MEDIUM EPSS 0% → fixed in 9.5.1 CVE-2026-56149 MEDIUM EPSS 0% → fixed in 9.4.3 CVE-2025-68384 MEDIUM EPSS 0% → fixed in 9.2.3 CVE-2026-56143 MEDIUM EPSS 0% → fixed in 9.3.0 CVE-2026-56148 MEDIUM EPSS 0% → fixed in 9.4.3 CVE-2026-72636 MEDIUM EPSS 0% → fixed in 9.4.5 CVE-2026-56145 MEDIUM EPSS 0% → fixed in 9.4.4 CVE-2026-72638 MEDIUM EPSS 0% → fixed in 9.4.5 CVE-2026-72687 MEDIUM EPSS 0% → fixed in 9.5.1 CVE-2026-72645 MEDIUM EPSS 0% → fixed in 9.5.1 CVE-2026-72647 MEDIUM EPSS 0% → fixed in 9.4.5 CVE-2026-72684 MEDIUM EPSS 0% → fixed in 9.4.5

Other Elasticsearch versions

Check another release line of Elasticsearch.

Elasticsearch 9.5.5Elasticsearch 9.4.8Elasticsearch 9.3.8Elasticsearch 9.2.8Elasticsearch 9.1.10Elasticsearch 9.0.8Elasticsearch 8.19.23Elasticsearch 8.17.10Elasticsearch 8.16.6Elasticsearch 7.17.29Elasticsearch 6.8.23

Frequently asked

Is Elasticsearch 8.18.8 patched?

Elasticsearch 8.18.8 is end-of-life and no longer receives security patches. Move to 9.5.5.

What version should I upgrade Elasticsearch 8.18.8 to?

Upgrade Elasticsearch 8.18.8 to at least 8.19.20 to clear its 1 open critical-or-high vulnerability.

When does Elasticsearch 8.18 reach end-of-life?

Elasticsearch 8.18 reached end-of-life on 2025-10-21 and no longer receives security patches.

What is the latest version of Elasticsearch?

The latest supported Elasticsearch release is 9.5.5.

Is Elasticsearch 8.18.8 still receiving security updates?

No — Elasticsearch 8.18.8 is on the 8.18 line, which reached end-of-life on 2025-10-21 and no longer receives security updates. Upgrade to 9.5.5 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Elastic's official advisory before you patch or upgrade — Elasticsearch official site ↗